better test to check if a user is staff or not - allows adding extra user types derived from editors/admins